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AMENDMENTS TO THE CLAIMS 

Please amend the claims as follows. 

1. (Currently Amended) A method of controlling access to resources, said method 
comprising: 

storing a policy decision for a resource in local memory, said policy decision 
received from a remote source of policy definitions, said policy decision 
based on a policy definition governing access to said resource and on 
requestor identifying information provided to said remote source; 

receiving a first an initial request for access to said resource, said frest initial 
request comprising said requestor identifying information; 

evaluating said first initial request using said policy decision in said local 
memory; 

receiving a notification from said remote source of a change in said policy 

definition , said notification identifying said resource 
comprising an updated version of said policy decision ; 

receiving a s e cond subsequent request for access to said resource, said se cond 
subsequent request comprising said requestor identifying information; and 

evaluating said s e cond subsequent request based on said notification updatcd 
v e rsion of said policy decision . 

2. (Previously Presented) The method of Claim 1 wherein said resource is affiliated with 
another resource, and wherein further a policy decision for said other resource is 
received from said remote source and stored in said local memory. 

3. (Cancelled) 

4. (Cancelled) 
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5. (Currently Amended) The method of Claim 26 i, wherein 

receiving said notification further comprises storing said updated version of said 
policy decision in said local memory. 

6. (Cancelled) 

7. (Cancelled) 

8. (Previously Presented) The method of Claim 1 wherein a period of time said policy 
decision is valid is also received from said remote source and stored locally. 

9. (Previously Presented) The method of Claim 1 wherein a condition associated with 
said policy definition is also received from said remote source and stored locally, 
wherein said condition is enforced locally. 

10. (Currently Amended) A method of controlling access to resources, said method 
comprising: 

receiving a first an initial request for access to a resource, said first initial request 
comprising requestor identifying information, wherein said first initial 
request is referred to a remote source of a policy definition that governs 
access to said resource for evaluation; 

receiving from said remote source a policy decision for said resource, said policy 
decision based on said policy definition and said requestor identifying 
information; and 

storing said policy decision in local memory, wherein a second subsequent request 
for access to said resource is evaluated locally using said policy decision 
stored in said local memory; and 

receiving a notification from said remote source of a change in said policy 
definition, said notification identifying said resource co mprising an 
updated ve rsi on of said policy deci sion, wherein a thifd request for access 
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to said resource received after said notification is evaluated based on said 
notificatio n updat e d v e rsion of said policy decision . 

11. (Previously Presented) The method of Claim 10 wherein said resource is affiliated 
with another resource, wherein a policy decision for said other resource is received 
from said remote source and stored in said local memory. 

12. (Cancelled) 

13. (Cancelled) 

14. (Currently Amended) The method of Claim 29 [[10]], wherein receiving said 
notification further comprises! 

storing said updated version of said policy decision in said local memory. 

15. (Cancelled) 

16. (Cancelled) 

17. (Original) The method of Claim 10 further comprising: 

receiving information that identifies a period of time said policy decision is valid. 

1 8. (Previously Presented) The method of Claim 10 further comprising: 

receiving from said remote source a condition associated with said policy 
definition, wherein said condition is enforced locally. 
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19. (Currently Amended) A computer-usable medium having computer-readable program 
code embodied therein for causing a computer system to perform a method of 
controlling access to resources, said method comprising: 

storing in local memory a policy decision for a first resource, said policy decision 
received from a remote source of policy definitions, said policy decision 
based on a policy definition governing access to said first resource and on 
requestor identifying information provided to said source; 

receiving a first an initial request for access to said first resource, said initial 
request comprising said requestor identifying information; 

evaluating said fost initial request using said policy decision stored in said local 
memory; 

receiving a notification from said remote source of a change in said policy 
definition , said notification identifying said first resource comprising an 
updat e d v e rsion of said policy decision ; 
receiving a s e cond subsequent request for access to said first resource; and 
evaluating said second subsequent request based on said notification up dat e d 
v e rsion of said policy d e cision . 

20. (Previously Presented) The computer-usable medium of Claim 19 wherein said first 
resource is affiliated with another resource, wherein a policy decision for said other 
resource is received from said remote source and stored in said local memory. 

21. (Cancelled) 

22. (Cancelled) 

23. (Previously Presented) The computer-usable medium of Claim 19 wherein a period 
of time said policy decision is valid is also received from said remote source and 
stored locally. ._ . 1 ..... 
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24. (Previously Presented) The computer-usable medium of Claim 19 wherein a 
condition associated with said policy definition is also received from said remote 
source and stored locally, wherein said condition is enforced locally. 

25. (Currently Amended) The computer-usable medium of Claim 19 wherein said 
computer-readable program code embodied therein causes said computer system to 
perform said method further comprising: 

receiving a first an initial request for access to a second resource, said fffst initial 
request comprising said requestor identifying information; 

providing said requestor identifying information to said remote source; 

receiving from said remote source a policy decision for said second resource, 

said policy decision for said second resource based on a policy definition that 
governs access to said second resource and said requestor identifying 
information; and 

storing said policy decision for said second resource in said local memory, 
wherein a subsequent second request for said second resource is evaluated 
using said policy decision stored in said local memory. 

26. (New) The method of Claim 1, wherein said notification comprises an updated 
version of said policy decision. 

27. (New) The method of claim 1, wherein evaluating said subsequent request further 
comprises: 

requesting an updated version of said policy decision from said remote source of 
policy definitions. 



28. (New) The method of claim 1, wherein receiving said notification further comprises: 
polling said remote source of policy definitions to request an updated version of 
said policy decision. 
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29. (New) The method of claim 10, wherein said notification comprises an updated 
version of said policy decision. 

30. (New) The method of claim 10, wherein evaluating said request for access to said 
resource received after said notification comprises: 

requesting an updated version of said policy decision from said remote source. 

31. (New) The method of claim 10, wherein receiving said notification further comprises: 

polling said remote source to request an updated version of said policy decision. 

32. (New) The computer-usable medium of Claim 19, wherein evaluating said 
subsequent request further comprises: 

requesting an updated version of said policy decision from said remote source. 
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